Home
Resources
Training
About Us
eStore

>

resources > security log resource center > encyclopedia > event 609

 

 

 

 

 

 

 

Latest Blog: Log monitoring and the Terry Childs/City of San Francisco debacle

 

Windows Security Log Events by ID

look up more events by Event ID or Category

Event ID

609

Title

User Right Removed

Type: Example: Randy's Comments:
Success

OS:

All versions

Category:

Policy Change

User Right Removed
User Right: %1 Removed From: %2
Removed By: User Name: %3 Domain: %4
Logon ID: %5

A user right was revoked from the Removed From user or group. See event 608 for a full explanation.

Note: This event and 609 do not log changes to logon rights such as "Access this computer from the network" or "Logon as a service". See events 621 and 622.

Next:

Get all the tools you need in one newsletter!
Free log parser scripts, clear explanations of Microsoft's latest security bulletins, and more. View a sample issue.
Email Address:
Your email address will not be shared. You may unsubscribe at any time.


Upcoming Webinars by Randy Franklin Smith


Additional Links

A
D
V